fixed xss error add fb link